Systems and methods for configuring a resource for network traffic analysis

ABSTRACT

The present disclosure is directed to systems and methods of configuring a resource for network traffic analysis. An agent executed by a computing device receives an indication to record a browsing session. The agent records network activity data of the browsing session. The agent generates a data file with the recording. The agent transmits the data file and a request to generate a report to an analytics server. The analytics server receives the request and extracts the network activity data from the data file. The analytics server applies an event processing protocol to the network activity data. The analytics server generates a report and transmits the report to the client device for display.

This application claims the benefit of and priority as a continuationapplication under 35 U.S.C. § 120 to U.S. patent application Ser. No.16/122,693, filed Sep. 5, 2018 and titled “SYSTEMS AND METHODS FORCONFIGURING A RESOURCE FOR NETWORK TRAFFIC ANALYSIS,” which is thecontinuation of and claims priority to U.S. patent application Ser. No.14/835,377, filed Aug. 25, 2015 and titled “SYSTEMS AND METHODS FORCONFIGURING A RESOURCE FOR NETWORK TRAFFIC ANALYSIS.” The contents ofthe foregoing applications are incorporated herein by reference in theirentireties.

BACKGROUND

In a networked environment such as the Internet, entities such as peopleor companies provide information for display on web pages or otherinterface by a computing device. The web pages can include text, video,or audio information provided by the entities via a web page server fordisplay on the Internet. Additional content such as electronicadvertisements can also be provided by third parties for display on theweb pages together with the information provided by the entities. Thus,a person viewing a web page can access the information that is thesubject of the web page, as well as selected third party advertisementsthat may or may not be related to the subject matter of the web page.

SUMMARY

The present disclosure is generally directed to systems and methods forconfiguring a resource for network traffic analysis. For example, anetwork traffic analysis tool may receive indications of networktraffic. The indications can be triggered by tags embedded or placed ina webpage. The tool can use the indications to generate a report.However, due to the complexity and volume of tags on a website orassociated with a browsing session, it may be challenging to configurethe tags or confirm or validate that the tags are configured asintended.

At least one aspect is directed to a method of configuring a webpage fornetwork traffic analysis. The method can include an agent of a webbrowser executed by a client device receiving an indication to record abrowsing session. The method can include the agent recording, responsiveto receiving the indication, network activity of the browsing session.The network activity can include events triggered by tags embedded in atleast one of a plurality of web pages accessed during the browsingsession. The method can include the agent generating a data filecomprising the recording of the network activity. The method can includethe client device transmitting, to an analytics server via a computernetwork, the data file and a request to generate a report using the datafile. The method can include the analytics server extracting, responsiveto the request, the network activity of the browsing session recorded inthe data file. The method can include the analytics server applying anevent processing protocol to the network activity of the browsingsession extracted from the data file recorded by the agent of the webbrowser executed by the client device. The method can include theanalytics server generating, responsive to application of the eventprocessing protocol, a report. The method can include the analyticsserver transmitting, to the client device via the computer network, thereport for display via a display device of the client device.

Another aspect is directed to a system to configure a webpage fornetwork traffic analysis. The system can include an agent of a webbrowser executed by a client device. The system can include an analyticsserver having one or more processors. The agent can be configured toreceive an indication to record a browsing session. The agent canrecord, responsive to the indication, network activity of the browsingsession. The network activity can include events triggered by tagsembedded on at least one of a plurality of web pages accessed during thebrowsing session. The agent can generate a data file comprising therecording of the network activity. The agent can transmit, to ananalytics server via a computer network, the data file and a request togenerate a report using the data file. The analytics server can beconfigured to extract, responsive to the request, the network activityof the browsing session recorded in the data file. The analytics servercan apply an event processing protocol to the network activity of thebrowsing session. The analytics server can generate, responsive toapplication of the event processing protocol, a report. The analyticsserver can transmit, to the client device via the computer network, thereport for display via a display device of the client device.

Another aspect is directed to a method of configuring a webpage fornetwork traffic analysis. The method can include an analytics serverreceiving, from a client device via a computer network, a request togenerate a simulated report using a data file recorded by an agent of aweb browser executed by the client device. The data file can storenetwork activity of a browsing session including events triggered bytags embedded on a plurality of web pages accessed by the client deviceduring the browsing session. The method can include the analytics serverextracting, responsive to the request, the network activity of thebrowsing session recorded in the data file. The method can include theanalytics server applying an event processing protocol to the networkactivity of the browsing session extracted from the data file recordedby the agent of the web browser executed by the client device. Themethod can include the analytics server generating, responsive toapplication of the event processing protocol, a report. The method caninclude the analytics server transmitting, to the client device via thecomputer network, the report for display via a display device of theclient device.

BRIEF DESCRIPTION OF THE DRAWINGS

The details of one or more implementations of the subject matterdescribed in this specification are set forth in the accompanyingdrawings and the description below. Other features, aspects, andadvantages of the subject matter will become apparent from thedescription, the drawings, and the claims.

FIG. 1 depicts a system to configure a resource for network trafficanalysis in accordance with an implementation.

FIG. 2 depicts a method for configuring a resource for network trafficanalysis in accordance with an implementation.

FIG. 3 depicts an operational block diagram of a system to configure aresource for network traffic analysis in accordance with animplementation.

FIG. 4 depicts a user interface for receiving recorded network activityin accordance with an implementation.

FIG. 5A depicts a user interface for a report generated with recordednetwork activity in accordance with an implementation.

FIG. 5B depicts a user interface for a report generated with recordednetwork activity in accordance with an implementation.

FIG. 5C depicts a user interface for a report generated with recordednetwork activity in accordance with an implementation.

FIG. 5D depicts a user interface for a report generated with recordednetwork activity in accordance with an implementation.

FIG. 6A depicts a functional flow diagram for generating a report withrecorded network activity in accordance with an implementation.

FIG. 6B depicts a functional flow diagram for generating a report withrecorded network activity in accordance with an implementation.

FIG. 7 is a block diagram illustrating a general architecture for acomputer system that may be employed to implement various elements ofthe system shown in FIGS. 1 and 3, the interfaces shown in FIGS. 4-6,the method shown in FIG. 2, and the functional flow diagrams shown inFIGS. 6A-6B, among others, in accordance with an implementation.

Like reference numbers and designations in the various drawings indicatelike elements.

DETAILED DESCRIPTION

Systems and methods described herein relate generally to configuring aresource (e.g., a webpage, website, online document, electronicdocument, or networked application) for network traffic analysis. Thenetwork traffic analysis can be performed by a network traffic analysistool, server or analytics engine. The analytics engine can, for example,track browsing activity prior to a conversion to generate a report thatindicates pages, content, or advertisements viewed or accessed by a userprior to making a purchase. A content provider, advertiser, onlineretailer or other website publisher can configure tags (e.g., HTML tags)or scripts (e.g., Java scripts) on, in, or with their webpage oradvertisements to facilitate identification of details associated with abrowsing session. When a user selects a link to purchase a product, forexample, the HTML or Java tag or script can identify the event and storethe event in a database for further processing, analytics, or reportingby the tool. However, due to the complexity and variability ofconfiguring a webpage with these tags, it can be challenging for websitedevelopers to confirm that they have correctly tagged all the content ontheir webpage in order to produce useful and accurate analytics andreports.

The present solution allows a webpage developer to confirm that theyhave properly configured their webpage for useful analysis and reports.In one implementation, the method can include a web browser recordingnetwork activity including browsing activity or transactions. Forexample, the web developer can browse their webpage to test or validatethe webpage. The web browser can be configured with an extension thatrecords the browsing activity in a *.har file format.

The web browser can further be configured with a pre-analyzer thatperforms an initial or preliminary analysis. For example, thepre-analyzer can (1) determine that the code on the webpage was (or wasnot) correctly copied from a template; (2) check network traffic status;(3) check certain parameters, such as the web developer's account ID isproperly included in the tag.

The web browser extension can forward the results of the pre-analyzerand the recording of the browsing activity to an analytics engineexecuted by a server. The server can analyze the recording of thebrowsing session to emulate aspects of the browsing session, such ashits, selections, conversions, etc. The server may be configured togenerate a report that filters certain types of activity or information(e.g., filter out personally identifying information, or filter outselections that did not result in conversions, etc.). Thus, theanalytics engine can use the recording to emulate the generation of areport, and provide the emulated report to the web developer via aninteractive user interface. The user can review the report, anddetermine to make any adjustments or changes to the configuration of theweb page, and confirm the configuration again.

In an illustrative example, a content provider configures their landingpage with analytics tags or scripts. The content provider initiates anextension configured on their webpage to record browsing activity. Thecontent provider selects their advertisement (e.g., via searchadvertisements displayed with a search results page), which re-directsthem to the advertisement's landing page on the advertiser's website.The content provider proceeds to select items (e.g., products on sale)and add them to an online shopping cart. Prior to checking out theshopping cart, the content provider may proceed to browse the company'sblogs, specials, etc.

The content provider can navigate back to the shopping cart and proceedto check out or purchase the items placed in the shopping cart. Theprocess of checking out may include re-directing the content provider toa third-party payment process, after which the content provider can bere-directed to a “Thank you for your purchase” page on the contentprovider's website.

With this example, the content provider may expect an analytics engineto generate a report with certain characteristics or information. Forexample, the content provider would expect the analytics engine togenerate a report with the following parameters or characteristics: asingle visit/session (multiple visits indicate cross-domain trackingproblems), paid search (absence of this may indicate a dropped uniquetracking identifier), particular goals met, or one conversion recorded.

The analytics engine can receive a recording in a .har format of thecontent provider's browsing activity to generate a report analyzing thebrowsing activity. The content provider can compare the report with theexpectations to verify that the content provider's webpage is configuredproperly.

Thus, the present solution improves configuration by allowing a contentprovider to immediately verify the configuration (or change inconfiguration) of their website, analyze a single user's journey asopposed to aggregated browsing activity, spans multiple platforms or webpages such as search and payment processors, works with websites thatare in a staging environment and not yet pushed live (e.g., non-publicwebsites still in development), and works behind a firewall or loginwall, among other benefits. The present solution allows a user orwebsite developer to record a “flow” through their website (and relatedsites). The recording contains page loads and network traffic (e.g.hits) sent to an analytics server. The recording can be done through abrowser extension such as an agent. The recording can be sent to theanalytics server, and the analytics server can present a report to theuser with how this data was interpreted by the analytics engine,including problems found, and detailed information on what interactionswere on which webpage.

FIG. 1 illustrates an example system 100 for configuring a resource fornetwork traffic analysis. The system 100 can include network analysisinfrastructure or content selection infrastructure. The system 100 caninclude one or more component or functionality of system 300. The system100 can include a data processing system 120 communicating with one ormore of a content provider 125, content publisher 115 or computingdevices 110 a-n (also referred to as computing device 110) via a network105. The network 105 can include computer networks such as the Internet,local, wide, metro, or other area networks, intranets, satellitenetworks, and other communication networks such as voice or data mobiletelephone networks. The network 105 can be used to access informationresources such as web pages, web sites, domain names, or uniformresource locators that can be displayed on at least one computing device110, such as a laptop, desktop, tablet, personal digital assistant,smart phone, or portable computers. For example, via the network 105 auser of the computing device 110 can access web pages provided by atleast one web site operator or content publisher 115. In this example, aweb browser of the computing device 110 can access a web server of theweb site operator or content publisher 115 to retrieve a web page fordisplay on a monitor of the computing device 110. The web site operatoror content publisher 115 generally includes an entity that operates theweb page. In one implementation, the web site operator or contentpublisher 115 includes at least one web page server that communicateswith the network 105 to make the web page available to the computingdevice 110.

The network 105 may be any type or form of network and may include anyof the following: a point-to-point network, a broadcast network, a widearea network, a local area network, a telecommunications network, a datacommunication network, a computer network, an ATM (Asynchronous TransferMode) network, a SONET (Synchronous Optical Network) network, a SDH(Synchronous Digital Hierarchy) network, a wireless network and awireline network. The network 105 may include a wireless link, such asan infrared channel or satellite band. The topology of the network 105may include a bus, star, or ring network topology. The network mayinclude mobile telephone networks using any protocol or protocols usedto communicate among mobile devices, including advanced mobile phoneprotocol (“AMPS”), time division multiple access (“TDMA”), code-divisionmultiple access (“CDMA”), global system for mobile communication(“GSM”), general packet radio services (“GPRS”) or universal mobiletelecommunications system (“UMTS”). Different types of data may betransmitted via different protocols, or the same types of data may betransmitted via different protocols.

The system 100 can include at least one data processing system 120. Thedata processing system 120 can include at least one logic device such asa computing device having a processor to communicate via the network105, for example with the computing device 110, the web site operator orcontent publisher computing device 115, and at least one contentprovider computing device 125. The data processing system 120 can bereferred to as an analytics server 120. The computing device 110 caninclude at least one agent 130. The data processing system 120 caninclude at least one server, such as an analytics server. For example,the data processing system 120 can include a plurality of serverslocated in at least one data center. The data processing system 120 caninclude multiple, logically-grouped servers and facilitate distributedcomputing techniques. The logical group of servers may be referred to asa server farm or a machine farm. The servers can also be geographicallydispersed. A machine farm may be administered as a single entity, or themachine farm can include a plurality of machine farms. The serverswithin each machine farm can be heterogeneous—one or more of the serversor machines can operate according to one or more type of operatingsystem platform.

Servers in the machine farm can be stored in high-density rack systems,along with associated storage systems, and located in an enterprise datacenter. For example, consolidating the servers in this way may improvesystem manageability, data security, the physical security of thesystem, and system performance by locating servers and high performancestorage systems on localized high performance networks. Centralizing theservers and storage systems and coupling them with advanced systemmanagement tools allows more efficient use of server resources.

The data processing system 120 can include a network analysis tool orsystem having at least one server (e.g., an analytics server). The dataprocessing system 120 can include a content placement system having atleast one server. The data processing system 120 can also include atleast one front end interface 135, at least one analytics engine 140, atleast one report generator 145, and at least one data repository 150.The front end interface 135, analytics engine 140, and report generator145 can each include at least one processing unit or other logic devicesuch as programmable logic array engine, or module configured tocommunicate with the database repository or database 150. The front endinterface 135, analytics engine 140, report generator 145, and datarepository 150 can be separate components, a single component, or partof the data processing system 120. The system 100 and its components,such as a data processing system, may include hardware elements, such asone or more processors, logic devices, or circuits.

The data processing system 120 can obtain anonymous computer networkactivity information associated with a plurality of computing devices110. A user of a computing device 110 can affirmatively authorize thedata processing system 120 to obtain network activity informationcorresponding to the user's computing device 110. For example, the dataprocessing system 120 can prompt the user of the computing device 110for consent to obtain one or more types of network activity information,such as geographic location information. The identity of the user of thecomputing device 110 can remain anonymous and the computing device 110may be associated with a unique identifier (e.g., a unique identifierfor the user or the computing device provided by the data processingsystem or a user of the computing device). The data processing systemcan associate each observation with a corresponding unique identifier.

For situations in which the systems discussed here collect personalinformation about users, or may make use of personal information, theusers may be provided with an opportunity to control whether programs orfeatures that may collect personal information (e.g., information abouta user's social network, social actions or activities, a user'spreferences, or a user's current location), or to control whether or howto receive content from the content server that may be more relevant tothe user. In addition, certain data may be treated in one or more waysbefore it is stored or used, so that certain information about the useris removed when generating parameters (e.g., demographic parameters).For example, a user's identity may be treated so that no identifyinginformation can be determined for the user, or a user's geographiclocation may be generalized where location information is obtained (suchas to a city, ZIP code, or state level), so that a particular locationof a user cannot be determined. Thus, the user may have control over howinformation is collected about the user and used by a content server.

The data processing system 120 can receive a request for content. Therequest may include a query such as a search query input into a searchengine of the data processing system or other system. The input querymay include text, characters, symbols, etc. The data processing system120 may receive the input query from a computing device 110 via network105. The input query may include audio (e.g., words spoken by a user ofthe computing device 110 and input into the search engine of the dataprocessing system via network 105 and an interface). The request mayinclude or be associated with information that facilitates selectingcontent responsive to the request. The information may include, e.g.,contextual information about an electronic document, web page,electronic application, or organic, non-advertisement link on which theselected content is to be displayed. The data processing system 120 mayprovide an interface displaying input text boxes, buttons, drop downs,or other widgets through which a user of a client can select orotherwise indicate a category for the search.

Responsive to the search query or other request for content (e.g.,electronic advertisements), the data processing system 120 (e.g., viadata processing system 120) can identify, select or otherwise obtaincontent to be provided or presented via the computing device 110 makingthe request, or some other computing device 110 associated with therequest for content. In some implementations, the data processing system120 may identify, select, or otherwise obtain content without receivinga request for content. The content may include, e.g., text, characters,symbols, images, video, audio, or multimedia content. The content itemmay include an advertisement in the form of a sponsored link (e.g.,provided by content providers) included by the search engine (e.g., viacontent selector) for display in the search engine results page. Therequest for content can include a request for an online advertisement,article, promotion, coupon, or product description. The data processingsystem 120 can receive the request from a computing device such as,e.g., computing device 110. For example, the data processing system 120can receive the request via an application executing on the computingdevice 110, such as a mobile application executing on a mobile device(e.g., smart phone or tablet). In some cases, the data processing system120 may not receive a separate request for content and, instead, selectand provide the content (e.g., advertisement) responsive to the searchquery or with search results. In some instances, a web page may requestcontent from the data processing system 120 responsive to a user of amobile device 110 visiting the web page (e.g., via a mobile device 110).

The request for content can include information that facilitates contentselection. For example, the data processing system 120 may requestinformation from the computing device 110 to facilitate identifyingcontent or content selection. The data processing system 120 may requestor obtain information responsive to receiving a request for content fromthe computing device 110. The information may include information aboutdisplaying the content on the computing device 110 (e.g., a content slotsize or position) or available resources of computing device 110 todisplay or otherwise manipulate the content.

The data processing system 120 may identify multiple content items(e.g., a first candidate content item and a second candidate contentitem) that are responsive to the request for content, or are otherwisecandidates for display on an online document (e.g., a web page or a pageof an online marketplace). The data processing system may initiate orutilize an online content item auction process to select one or more ofthe multiple content items for display on the online document. Anauction system may determine two or more bids (e.g., monetary bids,point bids, token bids) for content items to be displayed in an onlinedocument. The auction system can run the bids through an auction processto determine one or more winning bids. Content items corresponding tothe winning bids or highest ranking bids may be selected for display onor with the online document.

The data processing system 120 can include a content selector. The dataprocessing system 120 can analyze, parse, or otherwise process subjectmatter of web page or the candidate content items to determine whetherthe subject matter of the candidate content items correspond to the webpage. The data processing system 120 can identify, analyze, or recognizeterms, characters, text, symbols, or images of the web page or candidatecontent items using an image processing technique, character recognitiontechnique, or database lookup. The candidate content items may includemetadata indicative of the subject matter of the candidate contentitems, in which case the content selector may process the metadata todetermine whether the subject matter of the candidate content itemcorresponds to the web page.

Content providers may provide additional indicators when setting up acontent campaign that includes content items. The content provider mayprovide information at the content campaign or content group level thatthe data processing system 120 may identify by performing a lookup usinginformation about the candidate content item. For example, the candidatecontent item may include a unique identifier, which may map to a contentgroup, content campaign, or content provider. The data processing system120 may determine, based on information stored in data repository 150about the content provider (e.g., advertiser), that the candidatecontent item is relevant or matches a request for a content item,subject matter provided via a web page with which the content item is tobe displayed, or a search query input by a computing device. The dataprocessing system 120 may select the content item based on networkactivity information, browsing history information, profile informationetc. associated with the computing device 110 that initiated the requestfor the content item or the computing device 110 that is to display thecontent item.

In some cases, the data processing system 120 can perform an initialcontent selection process or technique to identify candidate contentitems. For example, the data processing system 120 can identify aninitial (or first or baseline) set of candidate content items that arecandidates for display with a webpage response. The data processingsystem 120 may identify the set of candidate content items based oncontent selection criteria established by a content provider, including,e.g., keywords, geographic information, profile information, etc. Thedata processing system 120 can also use information associated with therequest for content, such as keywords or topics of the webpage withwhich the content item is to be displayed, information about thecomputing device, etc. For example, the data processing system 120 canidentify candidate content items by filtering from a plurality ofavailable content items to generate a subset of filtered candidatecontent items that are candidate content items for display with thewebpage. The data processing system 120 can then initiate an onlinereal-time auction with the candidate content items.

To facilitate improving a content selection campaign or performance ofan online resource, for example, a content publisher 115 or contentprovider 125 can obtain a network traffic analysis report from ananalytics server, such as data processing system 120. The dataprocessing system 120 can receive indications of events triggered fromnetwork activity associated with a browsing session. For example, acontent publisher 115 (via content publisher device 115 or computingdevice 110) can establish or configure tags or scripts on their resource(or website or webpage) that track viewing activity, selection activity,network activity, location information, or other information associatedwith a browsing session, and provide this information to an analyticsengine to generate a report.

The system 100 can include an agent 130 that is designed and constructedto record network activity of a browsing session. The agent 130 caninclude an extension of a web browser. The agent 130 can be configuredto be part of or an extension of a web browser. The agent 130 can be aseparate application executing on a computing device 110. The computingdevice 110 can be associated with the content publisher 115 or an entityor administrator of the content publisher 115. For example, a webdeveloper associated with the content publisher 115 may use a computingdevice 110 configured with an agent 130 to develop, configure, test, orvalidate one or more aspect of the resource. The resource can include,for example, a webpage, website, online document, executableapplication, widget, etc.

The agent 130 can a record a multi-page session (“flow”) with respect topage loads and all interactions with an analytics server triggered viatags configured on the website or resource. The agent 130 can store therecorded data in a data file, and transmit the data to the dataprocessing system 120. In some cases, the agent 130 can be furtherconfigured to receive a report generated by the data processing system120, and display the report.

The agent 130 can record data triggered by tags configured on aresource. For example, the agent 130 can receive an indication or arequest from a user of the computing device 110 to record networktraffic. The agent 130 or web browser may generate or provide agraphical user interface that includes buttons or other user interfacewidgets that, when selected via an input mechanism (e.g., keyboard,mouse, touch interface, finger gesture, voice input, motion input, etc.)provides an indication to initiate recording.

The agent 130 can record hits, which can refer to an interaction thatresults in data being sent to the analytics server. Hit types caninclude page tracking hits, event tracking hits, and ecommerce hits.Each time the tracking code is triggered by a network activity (forexample, web browser loads a page on a website or a screen in a mobileapplication), the agent 130 can record that activity. The agent 130 canpackage each interaction into a hit and store the hit in a data file.Examples of hit types include: page tracking hits, event tracking hits,ecommerce tracking hits, social interaction hits.

The agent 130 can use a file format such an HTTP archive (“HAR”) formatto record the network activity in the data file. Recording networkactivity can refer to capturing, identifying, or otherwise obtainingdata associated with a browsing session. The data can includeinformation on objects loaded into the web browser such as, e.g.,content, third-party content items, advertisements, subject matter,images, documents, scripts, graphics rendering scripts, etc. The agent130, upon capturing network activity data or browsing session data, canexport the captured data to a file format such as HAR. The data file caninclude some or all objects loaded by the web browser during thebrowsing session, including a timestamp associated with the web browserloading the object. In some cases, the file format can include aJavaScript Object Notation (“JSON”). A JSON object can include or beformed from two data structures: a collection of name/value pairs and anordered list of values. The unordered collection of name/value pairs caninclude, e.g., one or more of an object, record, struct, dictionary,hash table, keyed list, or associated array. The ordered list of valuecan include, e.g., an array, vector, list, or sequence.

The agent 130 can record, capture or obtain some or all HTTP and HTTPSbrowser communications, including, e.g., requests, responses, or fullheaders and body of packets. For example, the agent 130 can adjust aproxy configuration for the web browser to facilitate recording thebrowsing session. For example, the agent 130 may adjust the proxyconfiguration for port 7999 for HTTP and port 7997 for HTTPS to supportrecording the browsing session. The agent 130 may then receive anindication to terminate, end, or stop recording. Responsive to theindication to stop recording the browsing session, the agent 130 canstop tracking or obtaining network activity data. Responsive to theindication to stop recording, the agent 130 can further generate thedata file in a file format, and store the data file in memory of thecomputing device. In some cases, the agent 130 can transmit the recordeddata file to the data processing system 120.

The agent 130 can obtain information about objects loaded by the webbrowser during the browsing session. This information can includeinformation associated with tags configured on one or more webpagesaccessed during the browsing session. For example, the resource can beconfigured with tags that facilitate event tracking. There may bevarious types of tags, such as page view tags that fire on each page ofa website, event tags that track actions or events such as a buttonclick, transaction tags that track an ecommerce transaction, social tagsthat track social interactions, timing tags that track loading speeds ona webpage, cross-domain tracking tags used to track separate, top-leveldomains as a single entity to combine data for multiple top-leveldomains together in the same report. For example, event tracking tagscan be used to determine online interactions, such as how many times abutton on a webpage was selected or clicked, whether a form wassubmitted, or a document was downloaded, for example. Tags can includewebsite code that facilitates measuring network traffic and visitorbehavior, understanding the impact of online advertising and socialchannels, remarketing and audience selection, testing and improving awebsite, etc. In some cases, the resource can be hardcoded with eventtags using JavaScript (such as ga(‘send’, ‘event’, ‘category’, ‘action’,‘label’). In some cases, event tags can include triggers based onpredefined variables or on custom variables. Variables can include,e.g., Pages {Page URL, Page Hostname, Page Path, Referrer}; Utilities{event, container ID, container version, random number}; Errors {errormessage, error URL, error line, debug mode}; Clicks {click element,click classes, click ID, click target, click URL, click text}; Forms{form element, form classes, form ID, form target, form URL, form text},History {new history fragment, old history fragment, new history state,old history state, history source}.

For example, an event tracking tag can be configured with event trackingparameters (or parameters) fields. Event can be a type of hit used totrack user interactions with content. Examples of user interactionstracked with events can include downloads, mobile advertisement clicks,gadgets, multimedia or software platforms used for creating elementssuch as graphics, animation, browser games, or web applications, AJAXembedded elements, and video plays. The parameter fields can include,for example: event category, action, label, and value. The eventtracking tag data structure can include a hierarchical configurationthat facilitates organizing event data or click data. To tag can beconfigured with a tracking identifier (“ID”) that is setup by entering avalue (e.g., a numerical value, alphanumeric value, string, character,constant string variable, etc.).

The top level of the tag data structure hierarchy can include categoryor event category. This can be used to indicate where an event takesplace. In an illustrative example, a website includes an “Overview” pagewith a button for “continue reading”. In this example, a tag configuredto track an interaction with the “continue reading” button can include atag data structure with a top level field for category that identifiesthe category as “overview”, which corresponds to the “overview” webpageon the website.

The second level in the tag data structure hierarchy can include theaction. The action indicates or identifier the user action on thewebpage. In this example, the user action corresponds to selecting orclicking on the “continue reading”. Thus, the action field can bepopulated with the action “continue reading”.

The third level in the tag data structure hierarchy can include thelabel field. The label can provide additional information about what wasclicked. In this example, label field can collect an outbound URLbecause the outbound URL can have an article title in it. For example, abuilt-in variable {{Click URL}} can collect this information.

The fourth level in the tag data structure can include a value field.The value field can include a numeric value corresponding to the action.It may be optional to include a value field.

The fifth level in the tag data structure can include a true/falsetoggle field. The true/false field indicates whether a non-interactionevent occurred. A non-interaction event may refer to a bounce-rate. Forexample, a bounce-rate may refer to a number or percentage of visitorsto a particular website that navigate away from the website afterviewing only one webpage of the website. For example, if a user selectsor clicks on a button or link that does not create a new pageview toimpact bounce-rate, the toggle field can be set to True. In the aboveexample, because the ‘continue reading’ button may lead to anotherwebpage on the same website, the tag value of this parameter can be setto False, thereby not increasing the bounce-rate.

Upon assigning values to the tag data structure, the tag can be furtherconfigured with triggering parameters. Triggering parameters can referto what fires the tag or triggers the tag to record an event or track orevent or perform some action or store some information. For example, thetag can be configured to trigger responsive to a “click”. There may bemultiple click types, such as a link click trigger or a click trigger. Alink click trigger can be used when there is any type of anchor tag <a>to attach to (e.g. <a href=“#”> Link </a>). A click trigger can be usedfor any other element like <div> or <img> tags (e.g. a button: <divclass=“button”> Button</div>). In some cases, there may be a non-anchorelement within an anchor tag (e.g. <a href=“#”><img class=“image”src=“#”></a>), in which case a developer may determine what to use toidentify whether a tag should fire or not and which element the tag isattached to. For example, if the tag is a Click URL (i.e. the anchor'shref), then the tag can be configured with a link click triggeringparameter. If the tag includes a class or some other attribute of thechild element, then the trigger parameter can be configured with a clicktrigger. Thus, a click trigger type can provide the information aboutthe lowest-level element clicked on, whereas a link click trigger typecan provide information about the anchor tag being clicked upon (even ifthere's a lower-level child element). Triggering parameters may furtherinclude, e.g., where to enable the trigger (such as trigger to fire onevery page via “URL matches Regex.*”).

Triggering parameters may further include a condition on which to‘fire’. The fire condition can function as a filter that controls orindicates when to fire the trigger. The tag can be configured with afire condition that fires on all clicks or on some clicks. For example,if the fire on condition is set to ‘some clicks’, additional fields canbe used to define, specific, control, or filter the firing conditions.

Thus, by configuring a tag data structure on a webpage, a computingdevice can transmit data to an analytics server that indicates whatarticles visitors clicked into from the ‘Continue Reading’ buttons ontheir overview page. For example, the configured tag can include thefollowing tag data structure: track_type{event}, category{overview},action{continue reading}, label{click URL}, fire{click}. The agent 130can record the data that may be otherwise transmitted to an analyticsserver. The agent 130 can, responsive to receiving an indication tostart recording a browsing session, intercept the tags that fireresponsive to a trigger condition, along with any other HTTP object, andstore them in a data file on the computing device.

Upon recording, generating, creating, storing, or updating the data filewith the network activity data of the browsing session, the computingdevice 110 can provide the data file to a data processing system 120 forfurther processing. In some implementations, the data processing system120 can include a front end interface 135 designed and constructed toreceive the data file via the network 105 from the computing device 110or agent 130 thereof. The agent 130, responsive to termination of therecording, can be preconfigured to access the front end interface 135provided by data processing system 120. In some cases, a user of thecomputing device 110 may input a web address or uniform resource locator(“URL”) into the web browser to access the front end interface 135.

The data processing system 120 (or analytics server 120), can receive(e.g., via the front end interface 135) data or information about thebrowsing session recorded or captured by the agent 130. For example, thefront end interface 135 can receive the data file via a data upload fromthe computing device 110. In some examples, the data processing system120 can receive the recorded data via a text input box configured on thefront end interface 135. For example, the data processing system 120 canprovide a text input box. The agent 130 can display the recorded networkactivity data (e.g., in JSON). A user of computing device can copy thetext output displayed by the agent 130 (e.g., via a copy functionalityof computing device 110), and paste the text into the input text boxprovided by front end interface 135.

The front end interface 135 can be configured with security protocols,such as Authentication, Authorization, and Accounting protocols ormechanisms for controlling access to the data processing system 120. Forexample, the front end 135 can provide a login prompt for display oncomputing device 110. The login prompt can include request forcredentials such as username and password. The front end interface 135can be configured with multifactor authentication that can require morethan one method of authentication from independent categories ofcredentials to verify the user's identity for the login. Logincredentials or factors can include, for example, one or more of apassword, pin, secret questions, security token, disconnected tokens,connected tokens, biometric (e.g., fingerprint or retina scanners orvoice recognition). In some implementations, the front end 135 canrequest the content provider or content publisher to input an identifierassociated with a content campaign.

FIG. 4 illustrates an example graphical user interface 400 provided bydata processing system 120 via the front end interface 135. Theinterface 400 can be provided via a web browser or a tab of a webbrowser. The front end interface 135 can be accessed by inputting orproviding an address 405 in an address bar of the web browser. The agent130 may automatically direct the web browser to this address, or a usermay input the address. The front end interface 135, responsive toreceiving a request to perform traffic analysis from the agent 130 orcomputing device 110, can provide a graphical user interface 410. Theinterface 410 can include text describing the service or providinginstructions. The interface 410 can include an upload button 415. Uponselecting the upload button 415 (or responsive to receiving anindication to upload by the front end interface 135), the dataprocessing system 120 can provide a prompt or dialog box or filedirectory configured to allow the user to point the front end interface135 to a location on the computing device 110 storing the data filerecorded by the agent 130.

The client device 110 can transmit the data file to the data processingsystem 120 via network 105. In some implementations, the client device110 may compress the data file prior to transmission over network 105.Compressing the data file may reduce the amount of bandwidth used totransmit the data file, decrease the amount of time needed to transferthe data file, or reduce network latency. In some implementations,uploading or transmitting the file may correspond to providing a requestto generate a report using the data file. In some cases, the dataprocessing system 120 may receive, via network 105 from computing device110, a separate request to generate a report using the data file.

In some implementations, the front end 135 can be configured to performinitial processing or analysis of the network activity data. The frontend interface 135 can include an extractor tool to extract the recordeddata file. For example, the front end interface 135 may decompress thedata file. The front end interface 135 may further analyze thedecompressed data. For example, the front end interface 135 can parse oranalyze the network activity data to diagnose one or more errorsassociated a tag configuration, and generate, create, or render a reportproviding the diagnosis.

The front end interface 135, responsive to receiving the data file orperforming one or more initial process on the data, can provide the datafile or initially processed data to an analytics engine 140. The dataprocessing system 120 can include an analytics engine 140 designed andconstructed to apply an event processing protocol (e.g., protocol 155)to the network activity of the browsing session extracted from the datafile recorded by the agent of the web browser executed by the clientdevice. The data repository 150 can store protocols 155 such as eventprocessing protocols. The analytics engine 140 can retrieve an eventprocessing protocol from data repository 150. The event protocolprocessing protocol may be a predetermined protocol (e.g., by anadministrator of the data processing system 120), or provided by theuser (e.g., the content publisher or content provider). The protocol maybe linked to an account associated with the user. The event processingprotocol (e.g., protocol 155) can include rules, logic, heuristictechniques, filters or other processing techniques to parse events orhits triggered by tags and stored in the data file. The analytics engine140 can further obtain configuration information of properties andviews, which may be filtered based on the level of access of the user.The analytics engine 140 can use this information to identify a browsingsession of the data file.

In some implementations, the analytics engine 140 includes a sessionizerthat is configured to identify one or more sessions in the data file. Anevent processing protocol can include a sessionization protocol that isconfigured to identify one or more sessions in the data file. Forexample, an event processing protocol applied to network activity todetermine a session can analyze time periods of network activity andinactivity in relations to a website to identify one or more sessions.The sessionization protocol may identify a period of time there isnetwork activity (e.g., a user is active) on a website or in anapplication. If there is network inactivity for a predetermined timeinterval (e.g., 20 minutes, 25 minutes, 30 minutes, 1 hour, or more),the data processing system 120 can attribute any future activity to anew, second session different from the previous, first session. In somecases, the data processing system 120 can determine that users thatleave the website and return within the predetermined time are countedas part of the original, first session.

The analytics engine 140 can obtain the parsed hits or events and applyone or more sessionization filters that divide the events or hitsrecorded in the data file into sessions. For example, the recorded datafile may include a plurality of events. One or more of the events can betriggered by tags from the browsing session. As tags are triggered, theycan provide information corresponding to the tag. For example, this mayinclude a timestamp, a source URL, a destination URL, etc. The analyticsengine 140 can analyze the information associated with triggered tags toidentify one or more sessions.

The data processing system 120 can apply the event processing protocolto determine a conversion. For example, the data processing system 120can identify, in the data file, a first recorded event triggered from atag associated with an advertisement content item. The tag can betriggered responsive to the user clicking on the advertisement duringthe browsing session recorded by the agent 130. The data processingsystem 120 can identify a second tag triggered during the same browsingsession that corresponds to a landing page for the advertisement. Thedata processing system 120 can identify a third tag associated with an“add to cart” button associated with a product on the landing page orthe website domain associated with the landing page. The third tag canbe a click tag or a link click tag. The data processing system 120 canidentify a fourth tag triggered during the same browsing session thatcorresponds to a checkout webpage. The fourth tag may correspond to apage tag that indicates that a user visited the checkout page. The dataprocessing system 120 can identify a fifth tag corresponding to a“checkout” button on the checkout webpage. This “checkout” button mayredirect the user or web browser to a third-party payment processorwebsite. The data processing system 120 can identify, from an HTTPpacket, that the web browser was directed to the third-party paymentprocessor webpage. In some cases, the third-party payment processorwebpage may not include embedded tags configured by the user. In somecases, the third-party payment processor webpage may include embeddedtags. Upon completing the transaction, the third-party payment processorwebpage may redirect the web browser to a confirmation page associatedwith the main website. The data processing system 120 can identify, inthe data file, a sixth tag triggered responsive to the user returning tothe confirmation webpage of the original website corresponding to thelanding page of the selected advertisement. Thus, the data processingsystem 120 can identify, by applying this exemplary event processingprotocol to the network activity recorded in the data file, a conversionand a transaction via a third-party payment processor.

The data processing system 120 can include a report generator 145designed and constructed to generate, create or otherwise provide areport. In some implementations, the report generator 145 can provide aninteractive or dynamic report via the front end interface 135. In someimplementations, the report generator 145 can provide the report fordisplay on computing device 110 via network 105. The report can includealerts, diagnosis information, event information, tag configurationinformation, conversion information, transaction information, networkactivity information, status information, number of browsing sessions,visited webpages, number of clicks, number of events, number of hits,etc.

The report generator 145 can include an Application ProgrammingInterface with a set of protocols and tools designed to extract datafrom the analytics engine 140 account into custom scripts or programsfor more automated and efficient reporting and analysis. In someimplementations, the report generator 145 can retrieve a report template160 from data repository 150. The report template 160 can includevarious report configurations, headings, sections, formulates, graphs,charts, tables, etc. that may facilitate conveying results of theanalytics engine 140 to a user. FIG. 5A illustrates a report 500generated by report generator 145 and provided by front end interface135 for display on the computing device 110. The report 500 includesvarious sections with section headings. The report 500 includesinteractive buttons, input boxes, check boxes, drop down menus, or otherwidgets. The report 500 includes a reanalyze button 502. The reanalyzebutton 502 can send the data file back to the analytics engine 140 to beanalyzed again. For example, the reanalyze button 502 can instruct theanalytics engine 140 to reanalyze the data file. A user may wantre-analyze the data file after making a change to an event processingprotocol (e.g., protocol 155), for example. The report 500 can include amore button 504 with additional functionalities such as downloadrecording, import new recording, or print report. The report canprovide, in an iframe, sections 506 a-c. For example, section 506 a caninclude links to jump to other views or sections such as view selection,errors and warnings section, views, and flow. Section 506 b can identifyinformation such as an IP address corresponding to a location associatedwith the analysis. Section 506 c can include filters or toggle boxes totoggle what is displayed in the report 500.

The report generator 145 can generate the report 500 with one or moresections. A first section 508 can include an overview of the analysis.This overview 508 can include a table of properties encountered in thedata file (e.g., HAR file). For each property, the report can show anumber of hits (e.g., pageviews, events, other). Pageview can refer toan instance of a page being loaded (or reloaded) in a web browser.Pageviews can be a metric defined as the total number of pages viewed.The report can further indicate, via an icon, whether there were anyalerts. The report can further show errors and warnings in section 510.For example, the errors and warnings section 510 can include a tableshowing an overview of errors and warning in selected properties andviews. Example errors or warnings can include: page had a clickidentifier parameter, but it was dropped or mangled by redirects; pagetook a long time to send a pageview hit to the analytics server; page ismost likely missing a tag. The report generator 145, analytics engine140, or front end 135 can identify one or more errors or warnings.

The report 500 can include a filter. The filter can be a configurationsetting that allows for adding, removing, or modifying data duringprocessing before it is displayed in your reports. The data processingsystem 120 can use the view filters to limit and modify the traffic datathat is included in a view. For example, the data processing system 120can use filters to exclude traffic from particular IP addresses, focuson a specific subdomain or directory, or convert dynamic page URLs intoreadable text strings.

The report generator 145 can generate the report 500 to include one ormore reporting views. A view or reporting view can be a subset of ananalytics account property that can have its own unique configurationsettings stored in a report template 160. The report template 160 caninclude multiple views for a single property and can configure each viewto show a different subset of data for the property. The report maycontain long strings, e.g. hit URLs that can be collapsed by default andadorned with an icon that when clicked, expands the collapsed string toits full content. The report can include a setting to expand collapsedstrings.

The report generator 145 can generate the report 500 with a viewsummaries section 512. The view summaries section 512 can show how thedata processing system 120 would interpret the hits recorded in the datafile. The summaries can be used to determine whether the data processingsystem 120 accurately analyzed the browsing session. If there are anydiscrepancies (e.g., the data processing system 120 failed to identify aconversion even though the user purchased a product), then the reportcan provide additional details to facilitate trouble shooting theprocessing protocol or the tags configured on the website.

The report can include a different section for each view. Types of viewsections can include, for example, marketing, audience, acquisition,behavior, conversions, flow, etc. Each view section can include, e.g., asite content table that shows a number of page views, events, andsessions for each URL as recorded in the view. The view section caninclude session data with one or more containers including, e.g.,referrer, entry URL, exit URL, campaign, conversions (a table), customdimensions (session scope) (a table), custom variables (session scope)(a table), number of hits, events, etc. Events can further include atable with columns such as Category, Action, Label, Count, or Sum.Actions for the same category can be rolled up in one row. This row canbe expanded showing all the permutations of actions and label for thatcategory.

The report generator 145 can generate the report 500 with an audiencesection 514 that shows audience information. The report generator 145can provide the audience information with a table that includes fieldsfor browser type, operating system type, language, and number ofsession, for example. In this example report, the browser type isBrowser_A, the operating system type is OS_A, the language is UnitedStates English, and the number of sessions identified by the analyticsengine 140 is 1. The audience section 514 can also include locationinformation. Since this is a test, the front end interface 135 can beconfigured with a location input where a user can provide locationinformation for the browsing session. Location information can beprovided in the form of an address, city, state, country, latitudelongitude, map cell, internet protocol address, etc.

The report generator 145 can generate the report 500 with an acquisitionsection 516 that shows information about parameters that identifycampaigns that refer traffic. Parameters can include, e.g., source,medium, campaign, term, content, etc. The source can refer to the sourceof the traffic, such as a search engine or a domain. The medium canrefer to a general category of the source, such as organic search,cost-per-click paid search (“CPC”), web referral (“referral”). In thisexample, the source may be “search-sim” which indicates a simulatedsearch engine. The medium can be cpc or cost-per-click paid search. Thecampaign name is “want stickers” and the term is “stickers”.

FIG. 5B illustrates report 501 generated by report generator 145. Thereport 501 can be an extension or a part of report 500. For example,scrolling down report 500 can lead to report 501. Report 501 includesinformation on behavior 518, conversions 520, and flow 522. The behaviorsection 518 can include information about the first page hit, last pagehit, number of page hits per sessions, and number of sessions in therecorded network activity data file. The Behavior section 518 canfurther identify site content, such as stickers, added, cart, review,and thank you, and a corresponding number of page hits for each content.The behavior section can further identify events and categorize theevents as follows: interest; maxvisitvalue. The report generator 145 canfurther provide, for each event, an action, label, counts, and sum. Inthis example, the counts for each event is 5 and the sum is 260 forinterest and 2160 for maxvisitvalue. A category can be a name providedvia the report template as a way to group objects for tracking. The samecategory name can be used multiple times over related user interfaceelements that are to be grouped under a given category.

The report generator 145 can generate the conversions section 520 toinclude information about conversions. A conversion can refer toachieving one or more goals or steps. In this example, goals includecompleting a checkout and adding to cart. The report generator 145 cangenerate a journey or flow section 522 that breaks down the recording byeach pageload in the web browser. Each pageload can include informationabout the URL, time, and number of hits per property. The reportgenerator 145 can frame each sequence of page loads in a differentcontainer. Each pageload can include a container for the selectedproperties. Below a property are additional containers for the selectedviews belonging to that property. A property container can be adornedwith a “tag” icon. A view container can be adorned with a view icon.

The flow section 522 can include detailed information about pages beingloaded, hits being fired, etc. This section 522 can be used to drilldown into problems or for troubleshooting. This section lists eachseparate page load and for each page load it shows: the page loadinformation (redirects, times, etc); the hit information (hit URL, etc);result of hit parsing; or view information: how a View stores the hitinformation.

FIG. 5C illustrates report 503 generated by report generator 145. Thereport 503 can be an extension or a part of report 500 or 501. Forexample, scrolling down report 500 or 501 can display report 503. Report503 includes information on pageload 2 524, page hit 526, and event hit528. The pageload 2 section includes redirect information (e.g., fromwhere the pageload was directed, or where a the pageload 2 directs thebrowser); URL, time, and number of hits per property. The section 524can further identify errors or warnings, such as a dropped trackingidentifier. Section 526 of the report 503 identifies page hitinformation. Page hit information can indicate the hit number (e.g., hit#1), the time of the hit (e.g., 3894 milliseconds after page load), hitURL, errors (e.g., page took too long to send a page view hit to theanalytics server), session start hit information, title (e.g.,stickers), URI, hostname, campaign, etc. The report can include section528 for an event hit (e.g., hit #2), which may identify a time (e.g.,3894 ms after pageload), hit URL, tracking identifier (e.g.,UA-62407230-1), event type (e.g., ecommerce), hit information (e.g., hitnumber in session, title, URI, hostname). Report section 528 may furtherinclude latency tracking information in a table form, such as page loadtime (e.g., 2700 ms), document object model (“dom”) interactive time(e.g., 383 ms), dom contentloaded time (e.g., 383 ms), connection time(e.g., 39 ms), and dns time (e.g., 0).

FIG. 5D illustrates the report 500 with the “more” drop-down button 504expanded. The report generator 145 or front end interface 135 canprovide interactive report features and additional functionality such asallow a user to download the recording, import a new recording, or printthe report (or the recording) by selection via the more button 504.Additional features or function can include, e.g., reanalyze, saveinput—this sends the input to the server which replies with a zipped upversion of the request HAR, or new—this brings the user to the screenwith the upload/paste options. The data processing system 120 or agent130 can print the report or convert the HTML or Javascript renderedreport to a post script display format to facilitate transmitting thereport to other computing devices via network 105.

FIG. 2 illustrates a method 200 for configuration a resource (or websiteor web page) in accordance with an implementation. The method 200 can beperformed by system 100, system 301, data processing system 120,computing system 700, or one or more component thereof. In someimplementations, at 210 the method 200 can include an agent receiving anindication to record a browsing session. At 215, the agent can recordnetwork activity of the browsing session. At 220, the agent can generatea data file with the recording. At 225, the agent can transmit the datafile and a request to generate a report. At 230, an analytics serverreceives the request and extracts the network activity data from thedata file. At 235, the analytics server applies an event processingprotocol to the network activity data. At 240, the analytics servergenerates a report. At 245, the analytics server transmits the report.

Still referring to FIG. 2, and in further detail, the agent receives anindication to record a browsing session at 210. The agent can include aweb browser extension executed by one or more processors of a clientdevice or computing device. The agent can receive the indication via auser interface of the client device. The agent can receive theindication via one or more buttons, prompts, widgets or other graphicaluser interface elements provided via the agent or web browser.

At 215, the agent can record network activity data of the browsingsession. The browsing session can include accessing multiple web pages.The multiple web pages may correspond to a same web site or web sitesoperated by different entities, such as a third party website. Themultiple web pages can correspond to multiple web sites operated by asame entity. The agent can record objects loaded by the web browserduring the browsing session. Objects can be loaded responsive tobrowsing activity or network activity or interactions via input/outputfrom client device. The agent can record events or hits triggered bytags embedded in at least one of the multiple web pages. For example,the content provider or publisher's webpage may include tags, whereas athird party payment processor's webpage may not include tags accessibleby the user. The agent can record events or hits triggered by tags on aprivate web page, a webpage behind a firewall, a webpage that has notgone public or is not live. Thus, the agent can record a representationof the multiple webpages and the hits or events of the browsing session,wherein the hits or events include interactions, redirects, clicks,conversions, ecommerce, etc.

At 220, the agent can generate a data file with the recording of thenetwork activity data. The data file can be in a format such as HAR. Theagent may compress the data file for transmission. The agent cantransmit the data file at 225. The agent can also provide a request togenerate a report. In some cases, the request can include the data file.In some cases, the request may be separate from transmission of the datafile.

In some implementations, the agent establishes a communications channelwith the analytics server prior to transmission. The agent can requestauthorization to access the analytics server. The analytics server mayrequest authentication credentials. The agent can provide thecredentials and the analytics server can perform authentication.Responsive to successful authentication, the analytics server or agentcan establish a communication channel between the agent and server. Theagent can transmit the data file via the established, securecommunication channel over a network.

In some implementations, the agent can perform preprocessing of thenetwork activity data of the browsing session prior to transmitting thedata file to the analytics server. For example, the agent can compareparameters, fields or other instructions or code associated with a tagembedded on the web page (e.g., JavaScript tag, tag data structure,etc.) with a predetermined template. For example, the template mayinclude 4 fields and the agent can compare the number, order, or type offields in the tag embedded on the webpage with the template to determinea match (e.g., a same number, same types, field names, parameters,structure, etc.). In some instances, the agent can check to see if atracking identifier or tracking code field is properly configured withthe tag. The tracking code or identifier may correspond to an accountidentifier of the tag embedded on the web page. Thus, the agent canperform preprocessing of the network activity of the browsing sessionprior to transmitting the data file to the analytics server.

At 230, the analytics server receives the request and extracts thenetwork activity data from the data file. The analytics server caninclude a front end or back end to perform analytics. For example, afront end of the analytics server can receive the data file, extract orparse components of the data file. The front end can perform initialprocessing to identify tracking identifiers or otherwise convert ortransform the data in a format for the back end.

At 235, the analytics server applies an event processing protocol to thenetwork activity data. For example, the back end can apply asessionization protocol to identify one or more sessions of the browsingsession. The sessionization protocol can include identifying one or moretracking identifier and a duration and applying a heuristic technique orpredetermined duration threshold or time interval threshold to networkactivity to identify a session. For example, the analytics server candetermine there was network activity for 15 minutes on a website andthen identify a first session. The analytics server may then determinethere was network inactivity for 30 minutes, which was followed byadditional network activity for 15 minutes. Thus, the analytics servermay determine the subsequent 15 minutes of network activity separatedfrom the first 15 minutes of network activity by 30 minutes ofinactivity corresponds to a second network activity session.

In some implementations, the analytics server can determine or detect,using the event processing protocol, that a conversion or a transactionoccurred. The analytics server can apply the event processing protocolto determine that a conversion occurred and a transaction occurred via athird-party payment processor. For example, the event processingprotocol may be configured to identify a conversion goal correspondingto a tag with a source page named “add to cart”, a second tag associatedwith a “checkout” button, and a third tag associated with a confirmationweb page that is triggered responsive to a page view. Thus, byapplication of this event processing protocol to network activity data,the analytics server can identify a conversion or a transaction via athird party payment processor and generate a report to include anindication of a conversion and a transaction via a third-party paymentprocessor.

At 240, the analytics server generates a report. The report can begenerated responsive to application of the network activity protocol.For example, the report can indicate the number of sessions identifiedin the network activity data, a duration of the sessions, URLs accessedduring the session, hits during the session, conversions during thesession, errors, alerts or warnings associated with tags triggeredduring the session, etc.

In some cases, the report can include data for only a single browsingsession associated with the client device executing the agent thatrecords the network activity data. The report can only include data fromtags triggered by webpage behind a firewall, or on a private network, ora webpage that has not gone public or live yet (e.g., a webpage still indevelopment). The report can include information from only a browsingsession recorded via an agent (e.g., extension of the web browser)executed by the client device.

At 245, the analytics server transmits the report for display via adisplay device of the client device. The report can be provided usingvarious formats or rendering techniques. In some cases, the analyticsserver (or front end) can render the report and provide the rendereddata for display on the client device (e.g., via agent or web browser).In some cases, the analytics server can provide the report data forrendering by the client device (e.g., as JavaScript objects).

FIG. 3 depicts an operational block diagram of a system 300 to configurea resource for network traffic analysis in accordance with animplementation. The system 300 can include one or more component orfunctionality of system 100. The agent 305 can include a web browserextension, such as a web browser plug-in or add-on. The front end 310,analytics engine 315, quota service 320 and configuration service 325can reside or execute on one or more processors or memory of a dataprocessing system, such as data processing system 120 or one or moreservers, such as an analytics server.

The agent 305, front end 310, analytics engine 315, quota service 320and configuration service 325 can each include at least one processingunit or other logic device such as programmable logic array engine, ormodule. The front end 310, analytics engine 315, quota service 320 andconfiguration service 325 can be separate components, a singlecomponent, or part of a data processing system (e.g., data processingsystem 120). The system 300 and its components, such as a dataprocessing system, may include hardware elements, such as one or moreprocessors, logic devices, or circuits.

The system 300 can include an agent 305. The agent 305 can be configuredon a computing device. The agent 305 can include a tag assistant or abrowser extension. The agent 305 can record network activity data. Theagent 305 can scrub the recorded data. The agent 305 can load andpopulate a front end interface of an analytics server by transmittingthe recorded data (e.g., in HAR data file) via network 105. The agent305 can include one or more component or functionality of agent 130.

In some implementations, the agent 305 can record a multi-page session(flow) with respect to page loads and all interactions. The agent 305can provide the recorded data for display on a computing device to allowusers to review the recorded data. The agent can allow users to send thedata for analysis to the front end 310 via network 105. The agent 305can also receive and display the report generated by the analyticsserver.

In an illustrative example, the agent 305 receives an indication or arequest for a report. The agent 305 then transmits a request to thefront end 310 to verify that the agent 305 (or computing device or userthereof) is logged into an analytics account corresponding to the frontend 310. If so, the agent 305 can load an iframe (e.g., inline framesuch as an HTML document embedded within or inside another HTML documenton a website) with an empty report from the front end 310. This reportcontains a <textarea> element. The agent 305 can fill this textarea withthe HAR, and then find the “submit” button on the web page and emulate aclick.

The system 300 can include a front end 310. The front end 310 caninclude one or more component or functionality of front end interface135. The front end 310 (or 135) can include a communication port tocommunicate over network 105. The front end 310 can include hardware orsoftware to render content such as server-side JavaScript content. Thefront end 310 can accept requests from the agent 305, invoke theanalytics engine 315 to parse and sessionize the hits, then rundiagnostics on this data, and finally return a rendered response orreport for display on a computing device.

The front end 310 can serve a webpage configured to receive packetscarrying data indicating the recorded browsing session. The webpage canreceive the recorded browsing session via a recorded data file in a fileformat, or via an input text box. The front end 310 can be furtherconfigured to receive an IP address. The IP address can be used tosimulate a location from which network activity is coming. By simulatingan IP address or location for network activity, the system can applyIP-filters when performing analytics to test whether the IP filtersworking as intended or are susceptible to circumvention.

The front end 310 can further provide various levels of access, such asa normal user (e.g., a content provider, content publisher, or computingdevice), or a support technician of the system. Different levels mayprovide access to different properties and views. In someimplementations, the front end 310 can be further configured to parsethe received data to extract raw hits. The front end 310 can send theextracted hits to an analytics engine with a list of authorizedproperties and views. The front end 310 can receive session informationfrom the analytics engine 315 and combine the raw hits data with theparsed hits and sessionized information to generate a model. The frontend 310 can further render the model in the web browser executing on theclient device associated with the agent 305.

The front end 310 can receive a request from the agent 305 for ananalytics report. The front end 310 can access configuration service 325to authenticate the agent 305 and determine a level of access or whichidentifiers the agent 305 is authorized to view. For example, the agent305 may only be authorized to view a report for identifiers associatedwith the agent 305. The front end 310 can then parse the HAR and extractthe raw hits from the request.

With the extracted raw hits, the front end 310 can create a request tothe analytics engine 315 (or back end) that includes, for example: 91)raw hits; authentication level; and authorized identifiers. The frontend 310 can receive a response from the analytics engine 315 withsessionization information, and verify that the response does notcontain any data that is tied to properties or views to which the userdoes not have access.

The front end 310 can create a model of the recorded browsing session(or flow or journey) using the data from the response and from theparsed HAR. The front end 310 can run diagnostics on this model andrender a report based on the model and diagnostics results. For example,the model representation can include: ModelRecording (represents thejourney and is the main entry point); ModelPage (represents a page theuser visited); ModelHit (represents a hit sent from a page);ModelProfileHit (represents a hit captured in a view);ModelProfileSession (represents a session with associated capturedModelProfileHit-s); ModelProperty (a wrapper around a Config Serviceobject representing a property); and ModelProfile (a wrapper around aConfig Service object representing a view).

The front end 310 can run one or more diagnostics including, e.g.,detect a page that did not send a hit, detect dropped trackingidentifiers, outdated protocol, missing tracking code, missinge-commerce data, clicks and visits discrepancies, goal conversionirregularities, improper tagging, improper filter implementation, orother warnings, alerts or errors related to the browsing session orresource configuration. In some implementations, to perform diagnostics,the front end 310 can be configured with an inspector for each type ofdiagnosis. The front end 310 can invoke a corresponding inspector on themodel, which may create errors or warnings including localizable stringsthat can be rendered in the browser.

In some implementations, the front end 310 can include an aggregatorconfigured to operate on the model to generate overall numbers, such asnumber of events rolled up by category, number of pageview hits for eachURL, Entry and exit URL for a session, campaign information for asession, goals/conversions for a session, custom dimensions with sessionscope. Custom dimensions can refer to a custom descriptive attribute orcharacteristic of data. Examples of default dimensions include Browser,Landing Page and Campaign. Other examples of dimensions include Browser,Exit Page, Screens, or Session Duration. Dimensions such as Latitude,Longitude, or City Name can be used for a geographic location. Adimension can have a value. For example, the dimension City Name caninclude a value such as San Francisco, Berlin, or Singapore.

In some implementations, the front end 310 accesses a quota service 320to protect against abuse or over loading of the back end 315. The quotaservice 320 can include a profile or protocol to limit the number oftags or hits for a website. The tags can be limited based on property orper session. For example, the quota service 320 may set a limit of apredetermined number of hits (e.g., 250, 500, 1000, 750, etc.) during asession, predetermined number of hits (e.g., 500, 1000, 2000, 10,000,100,000, 200,000, etc.) per analytics account during a predeterminedtime interval (e.g., 12 hours, 24 hours, 48 hours, 72 hours, week,etc.). Additional limits can be based on timing of hits, such as amaximum number of timing hits processed per property per day (or set asa percentage of total number of pageviews processed for that property).

The system 300 can include an analytics engine 315. The analytics engine315 can include a back end or a protocol service. A protocol service (orprotocol buffer) may refer to technique for serializing structured datathat facilitates allowing components to interface or communicate witheach other and store structured information. The protocol service caninclude an interface description language that describes the structureof data and a program that generates source code from that descriptionfor generating or parsing a stream of bytes that represent thestructured data. The protocol service can be implemented in a computerprogramming language or scripting language such as, e.g., C++, Java,Python, JavaScript, Go, PHP, Ruby, Perl, Scala, or Visual Basic.

The protocol service of the analytics engine can receive a collection ofhits and the views extracted from the data file. For each hit (e.g., astring representing the hit URL), the analytics engine 315 can returndetails or information related to hit processing. If the user has accessto the views of the property, the backend can also return web propertyhits for each property.

In some implementations, the analytics engine 315 may not write data todata storage. Rather, the analytics engine 315 can read configurationfrom the Configuration Service 325, without reading data from other datasources. Therefore, in some implementations, the sessionizer of theanalytics engine 315 may not take any history of a visitor into account.Each request can be processed as if it were the very first time thatvisitor sent any network traffic.

The analytics engine 315 can process a request that includes raw hitsand view identifiers the user has access to as follows: (1) hit parsing;(2) perform a lookup for materialized views (structured views) in theconfiguration service 325; and (3) sessionization. The analytics engine315 can parse the raw hit (e.g., a string) to identify a trackingidentifier and a view identifier for each hit. In some implementations,the analytics engine 315 can access the configuration service to obtainthe materialized views (e.g., a database object that contains theresults of the query) that can include the tracking identifier or viewidentifier.

A tracking identifier (or tracking ID) can include a string such asUA-000000-01. The tracking ID can be included in tracking code of thetag to indicate to the analytics server which account and property tosend data to. The tracking ID can be included in a JavaScript or otherprotocols. In one example, the first set of numbers (000000, in theexample above) can refer to an account number, and the second set (−01)can refer to a specific property number associated with the account. Aproperty can refer to a sub-component of an analytics account thatdetermines which data is organized and stored together. A resourcetagged with the same Property ID can be collected and stored together. Asingle property can be used to track one website or mobile application,or be a roll-up of the data from multiple sites or mobile applications.

A view identifier (or view ID) can refer to a type of reporting viewthat includes data about a subset of traffic with a user identifier.User ID views can include a set of cross device reports, which canprovide tools you need to analyze how content is engaged on differentdevices over the course of multiple sessions.

To perform sessionization, the analytics engine 315 can organize thehits by tracking identifier. The analytics engine 315 maycross-reference the tracking ID with the viewer ID. For hits with thesame tracking identifier, the analytics engine 315 can create aninstance of a session. The analytics engine 315 can further determinevisitor lifetime information, which can include parameters such asvisitor-scope custom dimensions, visitor namespace, experiments,dimension widening, first campaign, and acquisition visit.

FIG. 6A depicts a functional flow diagram 601 for generating a reportwith recorded network activity in accordance with an implementation. Theuser 604 can refer to a user of a computing device such as a webdeveloper. The agent 646 can include agent 130 or 305 executed by acomputing device 110. The browser tab 646 can include the web browserexecuted by computing device 110. The iframe 650 can refer to acomponent provided by a front end interface 135 or 310. The back end(“BE”) 654 can include an analytics engine 140 or 315. The configurationservice 656 can include configuration service 325.

At 602, a user 644 can provide an indication via a computing device oragent to view an analytics report. For example, the user may access aURL or website associated with the analytics report. At 604, the agent646 conveys the request to load the report to the browser tab 646. At606, the user can click a report button to request a report or access toa report. At 608, the browser tab can return a notification or prompt tothe agent to request the agent 646 to confirm or verify authenticationcredentials. At 610, the agent 646 can send a request to the front end(“FE”) 652 to verify that the user 644 is logged into an analyticsaccount. If the request is approved (612), the agent 646 can set asource or location (e.g., IP address). At 614, the agent 646 can set thesource and provide the source information to the iframe 650. At 616, theiframe can send a get request to the front end 652. At 618, the frontend can return a form with a text area element. The agent 646 can fillthe text area at 620 with the data file (e.g., in HAR format). The agent646 can further emulate a click at 622 to submit the HAR data file tothe iframe 650. At 624, the iframe 650 can initiate an analysis via thefront end 652. At 626, the front end 652 can request authorized viewidentifiers from the configuration service 656. At 628, theconfiguration service 656 can respond with the requested list ofauthorized views and provide the list to the front end 652. At 630, thefront end can analyze the hits and views and provide the results to theback end 654. At 632, the back end 654 gets a view configuration fromthe configuration service 656 that includes authorized configurationviews, and the configuration service 656 returns the authorizedconfiguration views at 634. At 636, the back end 654 parses the hits,and at 638 the back end 654 determines sessions for the hits (e.g.,categorize the hits into sessions). At 640, the back end 654 returns theparses and sessionized hits to the front end 652. The front end cangenerate, create and render the report at 642 for display via iframe650.

FIG. 6B depicts a functional flow diagram 603 for generating a reportwith recorded network activity in accordance with an implementation. At658, a user 644 can provide an indication via a computing device oragent to view an analytics report. At 660, the agent 646 can provide theindication to load the report to a browser tab 648. At 664, the browsertab can return a notification to agent 664 to initiate a login check toverify the agent is authenticated. At 666, the agent 646 initiates alogin check with the front end 652 to get authenticated. At 668, thefront end 652 indicates that the agent 646 failed the login check. At670, the agent 646 can load a log in page in the browser tab 648, and at672 the user can enter login credentials into the browser tab 648. At674, the user again requests access or attempts to load an analyticsreport, clicks the report button at 676, and receives a notificationfrom browser tab 678 to initiate authentication. The agent 646 requestsa second logincheck from the front end 652 at 680. This time, the frontend 652 returns a successful logincheck at 682. Thereafter, the flow issimilar to flow 600 where the authentication is approved. For example,at 684, the agent sets a source IP, at 686 the iframe sends a getrequest to the front end for the upload interface, and at 688 the iframereceives the form with the text area in which to upload the HAR file.

Referring now to FIG. 7, a block diagram of a computer system 700 inaccordance with an illustrative implementation is shown. The computersystem or computing device 700 can be used to implement the system 100,system 300, content provider 125, computing device 110, contentpublisher 115, data processing system 120, front end interface 135,analytics engine 140, report generator 145, data repository 150, andagent 130. The computing system 700 includes a bus 705 or othercommunication component for communicating information and a processor710 or processing circuit coupled to the bus 705 for processinginformation. The computing system 700 can also include one or moreprocessors 710 or processing circuits coupled to the bus for processinginformation. The computing system 700 also includes main memory 715,such as a random access memory (RAM) or other dynamic storage device,coupled to the bus 705 for storing information, and instructions to beexecuted by the processor 710. Main memory 715 can also be used forstoring position information, temporary variables, or other intermediateinformation during execution of instructions by the processor 710. Thecomputing system 700 may further include a read only memory (ROM) 720 orother static storage device coupled to the bus 705 for storing staticinformation and instructions for the processor 710. A storage device725, such as a solid state device, magnetic disk or optical disk, iscoupled to the bus 705 for persistently storing information andinstructions.

The computing system 700 may be coupled via the bus 705 to a display735, such as a liquid crystal display, or active matrix display, fordisplaying information to a user. An input device 730, such as akeyboard including alphanumeric and other keys, may be coupled to thebus 705 for communicating information and command selections to theprocessor 710. The input device 730 can include a touch screen display735. The input device 730 can also include a cursor control, such as amouse, a trackball, or cursor direction keys, for communicatingdirection information and command selections to the processor 710 andfor controlling cursor movement on the display 735.

The processes, systems and methods described herein can be implementedby the computing system 700 in response to the processor 710 executingan arrangement of instructions contained in main memory 715. Suchinstructions can be read into main memory 715 from anothercomputer-readable medium, such as the storage device 725. Execution ofthe arrangement of instructions contained in main memory 715 causes thecomputing system 700 to perform the illustrative processes describedherein. One or more processors in a multi-processing arrangement mayalso be employed to execute the instructions contained in main memory715. In alternative implementations, hard-wired circuitry may be used inplace of or in combination with software instructions to effectillustrative implementations. Thus, implementations are not limited toany specific combination of hardware circuitry and software.

Although an example computing system has been described in FIG. 7,implementations of the subject matter and the functional operationsdescribed in this specification can be implemented in other types ofdigital electronic circuitry, or in computer software, firmware, orhardware, including the structures disclosed in this specification andtheir structural equivalents, or in combinations of one or more of them.

Implementations of the subject matter and the operations described inthis specification can be implemented in digital electronic circuitry,or in computer software, firmware, or hardware, including the structuresdisclosed in this specification and their structural equivalents, or incombinations of one or more of them. The subject matter described inthis specification can be implemented as one or more computer programs,e.g., one or more circuits of computer program instructions, encoded onone or more computer storage media for execution by, or to control theoperation of, data processing apparatus. Alternatively or in addition,the program instructions can be encoded on an artificially generatedpropagated signal, e.g., a machine-generated electrical, optical, orelectromagnetic signal that is generated to encode information fortransmission to suitable receiver apparatus for execution by a dataprocessing apparatus. A computer storage medium can be, or be includedin, a computer-readable storage device, a computer-readable storagesubstrate, a random or serial access memory array or device, or acombination of one or more of them. Moreover, while a computer storagemedium is not a propagated signal, a computer storage medium can be asource or destination of computer program instructions encoded in anartificially generated propagated signal. The computer storage mediumcan also be, or be included in, one or more separate components or media(e.g., multiple CDs, disks, or other storage devices).

The operations described in this specification can be performed by adata processing apparatus on data stored on one or morecomputer-readable storage devices or received from other sources.

The term “data processing apparatus” or “computing device” encompassesvarious apparatuses, devices, and machines for processing data,including by way of example a programmable processor, a computer, asystem on a chip, or multiple ones, or combinations of the foregoing.The apparatus can include special purpose logic circuitry, e.g., an FPGA(field programmable gate array) or an ASIC (application specificintegrated circuit). The apparatus can also include, in addition tohardware, code that creates an execution environment for the computerprogram in question, e.g., code that constitutes processor firmware, aprotocol stack, a database management system, an operating system, across-platform runtime environment, a virtual machine, or a combinationof one or more of them. The apparatus and execution environment canrealize various different computing model infrastructures, such as webservices, distributed computing and grid computing infrastructures.

A computer program (also known as a program, software, softwareapplication, script, or code) can be written in any form of programminglanguage, including compiled or interpreted languages, declarative orprocedural languages, and it can be deployed in any form, including as astand-alone program or as a circuit, component, subroutine, object, orother unit suitable for use in a computing environment. A computerprogram may, but need not, correspond to a file in a file system. Aprogram can be stored in a portion of a file that holds other programsor data (e.g., one or more scripts stored in a markup languagedocument), in a single file dedicated to the program in question, or inmultiple coordinated files (e.g., files that store one or more circuits,subprograms, or portions of code). A computer program can be deployed tobe executed on one computer or on multiple computers that are located atone site or distributed across multiple sites and interconnected by acommunication network.

Processors suitable for the execution of a computer program include, byway of example, both general and special purpose microprocessors, andany one or more processors of any kind of digital computer. Generally, aprocessor will receive instructions and data from a read only memory ora random access memory or both. The essential elements of a computer area processor for performing actions in accordance with instructions andone or more memory devices for storing instructions and data. Generally,a computer will also include, or be operatively coupled to receive datafrom or transfer data to, or both, one or more mass storage devices forstoring data, e.g., magnetic, magneto optical disks, or optical disks.However, a computer need not have such devices. Moreover, a computer canbe embedded in another device, e.g., a mobile telephone, a personaldigital assistant (PDA), a mobile audio or video player, a game console,a Global Positioning System (GPS) receiver, or a portable storage device(e.g., a universal serial bus (USB) flash drive), to name just a few.Devices suitable for storing computer program instructions and datainclude all forms of non-volatile memory, media and memory devices,including by way of example semiconductor memory devices, e.g., EPROM,EEPROM, and flash memory devices; magnetic disks, e.g., internal harddisks or removable disks; magneto optical disks; and CD ROM and DVD-ROMdisks. The processor and the memory can be supplemented by, orincorporated in, special purpose logic circuitry.

To provide for interaction with a user, implementations of the subjectmatter described in this specification can be implemented on a computerhaving a display device, e.g., a CRT (cathode ray tube) or LCD (liquidcrystal display) monitor, for displaying information to the user and akeyboard and a pointing device, e.g., a mouse or a trackball, by whichthe user can provide input to the computer. Other kinds of devices canbe used to provide for interaction with a user as well; for example,feedback provided to the user can be any form of sensory feedback, e.g.,visual feedback, auditory feedback, or tactile feedback; and input fromthe user can be received in any form, including acoustic, speech, ortactile input.

While this specification contains many specific implementation details,these should not be construed as limitations on the scope of anyinventions or of what may be claimed, but rather as descriptions offeatures specific to particular implementations of particularinventions. Certain features described in this specification in thecontext of separate implementations can also be implemented incombination in a single implementation. Conversely, various featuresdescribed in the context of a single implementation can also beimplemented in multiple implementations separately or in any suitablesubcombination. Moreover, although features may be described above asacting in certain combinations and even initially claimed as such, oneor more features from a claimed combination can in some cases be excisedfrom the combination, and the claimed combination may be directed to asubcombination or variation of a subcombination.

Similarly, while operations are depicted in the drawings in a particularorder, this should not be understood as requiring that such operationsbe performed in the particular order shown or in sequential order, orthat all illustrated operations be performed, to achieve desirableresults. In certain circumstances, multitasking and parallel processingmay be advantageous. Moreover, the separation of various systemcomponents in the implementations described above should not beunderstood as requiring such separation in all implementations, and itshould be understood that the described program components and systemscan generally be integrated in a single software product or packagedinto multiple software products.

References to “or” may be construed as inclusive so that any termsdescribed using “or” may indicate any of a single, more than one, andall of the described terms.

Thus, particular implementations of the subject matter have beendescribed. Other implementations are within the scope of the followingclaims. In some cases, the actions recited in the claims can beperformed in a different order and still achieve desirable results. Inaddition, the processes depicted in the accompanying figures do notnecessarily require the particular order shown, or sequential order, toachieve desirable results. In certain implementations, multitasking andparallel processing may be advantageous.

What is claimed is:
 1. A non-transitory computer readable medium,including computer executable instructions, which when executed by acomputer causes the computer to: receive a first request to recordnetwork traffic on a browser session corresponding to a webpage; insert,responsive to a timing tag second request associated with the webpage, atracking code to the webpage for recording network traffic generated byat least one existing tag during monitoring of a browsing session, thewebpage comprising the at least one existing tag provided by a websitepublisher, the second request indicating a trigger to activate thetracking code; record, responsive to the tracking code being activatedby the second request, data of the network traffic of the webpage, thedata comprising information of the at least one existing tag configuredon the webpage; store the recorded data of the network traffic in memoryof the computer; and present a report on the computer for display usingthe recorded data.
 2. The non-transitory computer readable medium ofclaim 1, wherein the webpage is a first webpage and wherein the computerexecutable instructions further configured to cause the computer to:receive a plurality of requests for a plurality of second webpages;provide, responsive to each of the plurality of requests for theplurality of second webpages, the tracking code to each second webpageof the plurality of second webpages for recording the network traffic ofthe second webpage; and record a multi-page session data in response tothe tracking code being activated on each of the second webpage of theplurality of second webpages.
 3. The non-transitory computer readablemedium of claim 1, wherein the computer executable instructions furtherconfigured to cause the computer to: record a plurality of hits inresponse to the tracking code being activated by the second request, theplurality of hits comprising page tracking hits, event tracking hits,and ecommerce hits; and store, responsive to recording the plurality ofhits, the plurality of hits in the memory of the computer.
 4. Thenon-transitory computer readable medium of claim 1, wherein the computerexecutable instructions further configured to cause the computer torecord the data of the network traffic in response to the tracking codetriggered by the at least one existing tag configured on the webpage,the at least one existing tag comprising at least one of a page viewtag, an event tag, a transaction tag, a social tag, a timing tag, or across-domain tracking tag.
 5. The non-transitory computer readablemedium of claim 1, wherein the computer executable instructions furtherconfigured to cause the computer to preprocess, prior to transmission ofthe data to the server, activity of the browser session to identify oneor more errors in the at least one existing tag configured on thewebpage provided by the website publisher.
 6. The non-transitorycomputer readable medium of claim 1, wherein the at least one existingtag comprises a plurality of triggering parameters including an eventtrigger based on a predefined variable.
 7. The non-transitory computerreadable medium of claim 1, wherein to record the data of the networktraffic comprises at least one of capturing, identifying, or obtainingdata associated with the browser session.
 8. The non-transitory computerreadable medium of claim 1, wherein the computer executable instructionsfurther configured to cause the computer to: record the data of thenetwork traffic of the webpage, the data comprising the information ofthe at least one existing tag configured on the webpage; receive anindication to terminate recording of the data; terminate, responsive tothe indication to terminate, the recording of the data; generate,responsive to the termination, a data file in a file format comprisingan HTTP format; and store, responsive to generating the data file, thedata file comprising the data of the network traffic in the memory ofthe computer.
 9. The non-transitory computer readable medium of claim 1,wherein the network traffic comprises an additional browser session, arequest for additional webpage, a redirect to a second webpage, or thesecond request for the webpage.
 10. The non-transitory computer readablemedium of claim 1, wherein the computer executable instructions furtherconfigured to cause the computer to: display an icon of the report toindicate an alert comprising an error, a warning, and number of hits;receive, via a user interaction, an indication to provide an interactivereport for display on the computer; and receive, for display, a templateof the report comprising one or more interactive buttons and informationon the error and warning to the computer, the information to diagnosethe error and warning associated with the at least one existing tag onthe webpage, the one or more interactive buttons comprising one or moreconfiguration settings for adding, removing, or modifying information ofthe report.
 11. The non-transitory computer readable medium of claim 1,wherein the computer executable instructions further configured to causethe computer to: transmit the recorded data of the network traffic to aserver for processing the data; receive, from the server, responsive tothe data processed by the server, the report generated from processingthe data of the network traffic by the server; and wherein to presentthe report on the computer for display using the recorded data comprisespresenting the report on the computer using the processed data.
 12. Amethod of analyzing traffic over a computing network, comprising:receiving, by a computer executing a computer executable instructions, afirst request to record network traffic on a browser sessioncorresponding to a webpage; inserting, by the computer, responsive to asecond request associated with the webpage, a tracking code to thewebpage for recording network traffic generated by at least one existingtag during monitoring of a browsing session, the webpage comprising theat least one existing tag provided by a website publisher, the secondrequest indicating a trigger to activate the tracking code; recording,by the computer, responsive to the tracking code being activated by thesecond request, data of the network traffic of the webpage, the datacomprising information of the at least one existing tag configured onthe webpage; storing, by the computer, the recorded data of the networktraffic in memory of the computer; and presenting, by the computer, areport on the computer for display using the recorded data.
 13. Themethod of claim 12, further comprising: receiving, by the computer, aplurality of requests for a plurality of second webpages; providing, bythe computer, responsive to each of the plurality of requests for theplurality of second webpages, the tracking code to each second webpageof the plurality of second webpages for recording the network traffic ofthe second webpage; and recording, by the computer, a multi-page sessiondata in response to the tracking code being activated on each of thesecond webpage of the plurality of second webpages.
 14. The method ofclaim 12, further comprising: recording, by the computer, a plurality ofhits in response to the tracking code being activated by the secondrequest, the plurality of hits comprising page tracking hits, eventtracking hits, and ecommerce hits; and storing, by the computer,responsive to recording the plurality of hits, the plurality of hits inthe memory of the computer.
 15. The method of claim 12, furthercomprising recording, by the computer, the data of the network trafficin response to the tracking code triggered by the at least one existingtag configured on the webpage, the at least one existing tag comprisingat least one of a page view tag, an event tag, a transaction tag, asocial tag, a timing tag, or a cross-domain tracking tag.
 16. The methodof claim 12, further comprising preprocessing, prior to transmission ofthe data to the server, activity of the browser session to identify oneor more errors in the at least one existing tag configured on thewebpage provided by the website publisher.
 17. The method of claim 12,further comprising: recording, by the computer, the data of the networktraffic of the webpage, the data comprising the information of the atleast one existing tag configured on the webpage; receiving, by thecomputer, an indication to terminate recording of the data; terminate,by the computer, responsive to the indication to terminate, therecording of the data; generating, by the computer, responsive to thetermination, a data file in a file format comprising an HTTP format; andstoring, by the computer, responsive to generating the data file, thedata file comprising the data of the network traffic in the memory ofthe computer.
 18. The method of claim 12, wherein the network trafficcomprises an additional browser session, a request for additionalwebpage, a redirect to a second webpage, or the second request for thewebpage.
 19. The method of claim 12, further comprising: displaying, bythe computer, an icon of the report to indicate an alert comprising anerror, a warning, and number of hits; receiving, by the computer, via auser interaction, an indication to provide an interactive report fordisplay on the computer; and receiving, by the computer for display, atemplate of the report comprising one or more interactive buttons andinformation on the error and warning to the computer, the information todiagnose the error and warning associated with the at least one existingtag on the webpage, the one or more interactive buttons comprising oneor more configuration settings for adding, removing, or modifyinginformation of the report.
 20. The method of claim 12, furthercomprising: transmitting, by the computer, the recorded data of thenetwork traffic to a server for processing the data; receiving, by thecomputer, from the server, responsive to the data processed by theserver, the report generated from processing the data of the networktraffic by the server; and wherein presenting, by the computer, thereport on the computer for display using the recorded data comprisespresenting the report on the computer using the processed data.